Security audit
Security checks for vulnerabilities and agentic risk
This skill is a simple TikTok B2B script generator with disclosed inputs and no executable or privileged behavior.
Before installing, confirm that the default contact URL and English-style opening fit your use case. The reviewed files do not show code execution, credential access, persistence, or destructive behavior.
The output example is entirely in English while the rest of the skill documentation is in Chinese, and the document does not state that users can choose the output language. This creates a natural-language locale policy concern because the skill appears to impose a specific language on generated content without explicit opt-in.
The prompt template requires the script to start in a specific English-style format using "Hi guys, this is Anna" as the example, while the rest of the skill is presented in Chinese and offers no language or locale choice. This can violate language/locale policy because it implicitly forces a particular language/presentation style on output without user opt-in or documented justification.
No suspicious patterns detected.
